{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "azl3 opensc 0.26.1-1 versions ant\u00e9rieures \u00e0 0.27.1-1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "azl3 nodejs24 24.13.0-3 versions ant\u00e9rieures \u00e0 24.14.1-1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "cbl2 polkit 0.119-4 versions ant\u00e9rieures \u00e0 0.119-5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "azl3 polkit 123-3 versions ant\u00e9rieures \u00e0 123-4",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2025-49010",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-49010"
    },
    {
      "name": "CVE-2025-66215",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-66215"
    },
    {
      "name": "CVE-2025-66038",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-66038"
    },
    {
      "name": "CVE-2026-21717",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21717"
    },
    {
      "name": "CVE-2026-21712",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21712"
    },
    {
      "name": "CVE-2026-4897",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4897"
    },
    {
      "name": "CVE-2025-66037",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-66037"
    }
  ],
  "initial_release_date": "2026-04-09T00:00:00",
  "last_revision_date": "2026-04-09T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0414",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-04-09T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Microsoft. Elles permettent \u00e0 un attaquant de provoquer un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Microsoft",
  "vendor_advisories": [
    {
      "published_at": "2026-04-01",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-66038",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-66038"
    },
    {
      "published_at": "2026-04-02",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-4897",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4897"
    },
    {
      "published_at": "2026-04-01",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-66037",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-66037"
    },
    {
      "published_at": "2026-04-01",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-21717",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21717"
    },
    {
      "published_at": "2026-04-01",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-66215",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-66215"
    },
    {
      "published_at": "2026-03-31",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-21712",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21712"
    },
    {
      "published_at": "2026-04-01",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-49010",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49010"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Splunk Enterprise versions 10.2.x ant\u00e9rieures \u00e0 10.2.3",
      "product": {
        "name": "Splunk Enterprise",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk AI Toolkit versions 5.7.x ant\u00e9rieures \u00e0 5.7.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk Cloud Platform versions 9.3.2411 ant\u00e9rieures \u00e0 9.3.2411.129",
      "product": {
        "name": "Splunk Cloud Platform",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk Cloud Platform versions 10.3.2512 ant\u00e9rieures \u00e0 10.3.2512.9",
      "product": {
        "name": "Splunk Cloud Platform",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "image Docker Splunk versions 10.2.x ant\u00e9rieures \u00e0 10.2.2",
      "product": {
        "name": "Splunk",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk Cloud Platform versions 10.4.2603 ant\u00e9rieures \u00e0 10.4.2603.1",
      "product": {
        "name": "Splunk Cloud Platform",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk AppDynamics Database Agent versions ant\u00e9rieures \u00e0 26.4.0",
      "product": {
        "name": "Splunk AppDynamics Database Agent",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "image Docker Splunk versions 9.4.x ant\u00e9rieures \u00e0 9.4.10",
      "product": {
        "name": "Splunk",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk User Behavior Analytics versions 5.4.x ant\u00e9rieures \u00e0 5.4.5",
      "product": {
        "name": "Splunk User Behavior Analytics (UBA)",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk AppDynamics Private Synthetic Agent versions ant\u00e9rieures \u00e0 26.4.0",
      "product": {
        "name": "Splunk AppDynamics Private Synthetic Agent",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk AppDynamics Analytics Agent versions ant\u00e9rieures \u00e0 26.4.0",
      "product": {
        "name": "Splunk AppDynamics Analytics Agent",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk AppDynamics Cluster Agent versions ant\u00e9rieures \u00e0 26.4.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk AppDynamics Machine Agent versions ant\u00e9rieures \u00e0 26.4.0",
      "product": {
        "name": "Splunk AppDynamics Machine Agent",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk Cloud Platform versions 10.2.2510 ant\u00e9rieures \u00e0 10.2.2510.11",
      "product": {
        "name": "Splunk Cloud Platform",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk AppDynamics Python Agent versions ant\u00e9rieures \u00e0 26.4.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "image Docker Splunk versions 10.0.x ant\u00e9rieures \u00e0 10.0.5",
      "product": {
        "name": "Splunk",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk Add-on for Tomcat versions 3.3.x ant\u00e9rieures \u00e0 3.3.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk Cloud Platform versions 10.1.2507 ant\u00e9rieures \u00e0 10.1.2507.21",
      "product": {
        "name": "Splunk Cloud Platform",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk Enterprise versions 10.0.x ant\u00e9rieures \u00e0 10.0.6",
      "product": {
        "name": "Splunk Enterprise",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk AppDynamics Apache Web Server Agent versions 25.11.x ant\u00e9rieures \u00e0 25.11.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk Enterprise versions 9.4.x ant\u00e9rieures \u00e0 9.4.11",
      "product": {
        "name": "Splunk Enterprise",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "image Docker Splunk versions 9.3.x ant\u00e9rieures \u00e0 9.3.11",
      "product": {
        "name": "Splunk",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk Cloud Platform versions 10.0.2503 ant\u00e9rieures \u00e0 10.0.2503.13",
      "product": {
        "name": "Splunk Cloud Platform",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk Universal Forwarder versions 9.4.x ant\u00e9rieures \u00e0 9.4.11",
      "product": {
        "name": "Universal Forwarder",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk Enterprise versions 9.3.x ant\u00e9rieures \u00e0 9.3.12",
      "product": {
        "name": "Splunk Enterprise",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk AppDynamics Java Agent versions ant\u00e9rieures \u00e0 26.4.0",
      "product": {
        "name": "Splunk AppDynamics Java Agent",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-26007",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-26007"
    },
    {
      "name": "CVE-2024-24790",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-24790"
    },
    {
      "name": "CVE-2025-58436",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58436"
    },
    {
      "name": "CVE-2018-19361",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-19361"
    },
    {
      "name": "CVE-2023-0216",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-0216"
    },
    {
      "name": "CVE-2026-32777",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-32777"
    },
    {
      "name": "CVE-2025-61730",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-61730"
    },
    {
      "name": "CVE-2024-5321",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-5321"
    },
    {
      "name": "CVE-2019-17267",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-17267"
    },
    {
      "name": "CVE-2026-41324",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41324"
    },
    {
      "name": "CVE-2024-1597",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-1597"
    },
    {
      "name": "CVE-2026-42308",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42308"
    },
    {
      "name": "CVE-2023-0401",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-0401"
    },
    {
      "name": "CVE-2026-21933",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21933"
    },
    {
      "name": "CVE-2025-29775",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-29775"
    },
    {
      "name": "CVE-2026-3543",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3543"
    },
    {
      "name": "CVE-2026-21932",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21932"
    },
    {
      "name": "CVE-2018-19362",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-19362"
    },
    {
      "name": "CVE-2025-66199",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-66199"
    },
    {
      "name": "CVE-2025-15282",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-15282"
    },
    {
      "name": "CVE-2026-33871",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33871"
    },
    {
      "name": "CVE-2026-22737",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22737"
    },
    {
      "name": "CVE-2023-43642",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-43642"
    },
    {
      "name": "CVE-2025-68384",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68384"
    },
    {
      "name": "CVE-2024-9681",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-9681"
    },
    {
      "name": "CVE-2025-58190",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58190"
    },
    {
      "name": "CVE-2025-68973",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68973"
    },
    {
      "name": "CVE-2026-21637",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21637"
    },
    {
      "name": "CVE-2024-37891",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-37891"
    },
    {
      "name": "CVE-2026-22801",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22801"
    },
    {
      "name": "CVE-2026-42309",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42309"
    },
    {
      "name": "CVE-2023-49082",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-49082"
    },
    {
      "name": "CVE-2023-1370",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-1370"
    },
    {
      "name": "CVE-2026-39892",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39892"
    },
    {
      "name": "CVE-2026-33186",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
    },
    {
      "name": "CVE-2018-14719",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-14719"
    },
    {
      "name": "CVE-2024-4068",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-4068"
    },
    {
      "name": "CVE-2025-22872",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-22872"
    },
    {
      "name": "CVE-2025-29774",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-29774"
    },
    {
      "name": "CVE-2025-28164",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-28164"
    },
    {
      "name": "CVE-2026-3540",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3540"
    },
    {
      "name": "CVE-2024-10220",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-10220"
    },
    {
      "name": "CVE-2024-45339",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-45339"
    },
    {
      "name": "CVE-2020-9546",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-9546"
    },
    {
      "name": "CVE-2025-46762",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-46762"
    },
    {
      "name": "CVE-2023-37920",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-37920"
    },
    {
      "name": "CVE-2025-68156",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68156"
    },
    {
      "name": "CVE-2026-25990",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25990"
    },
    {
      "name": "CVE-2026-32288",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-32288"
    },
    {
      "name": "CVE-2022-45868",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-45868"
    },
    {
      "name": "CVE-2025-69223",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-69223"
    },
    {
      "name": "CVE-2025-47907",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47907"
    },
    {
      "name": "CVE-2020-10673",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-10673"
    },
    {
      "name": "CVE-2024-12797",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-12797"
    },
    {
      "name": "CVE-2025-30065",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-30065"
    },
    {
      "name": "CVE-2025-12084",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-12084"
    },
    {
      "name": "CVE-2024-12086",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-12086"
    },
    {
      "name": "CVE-2024-25638",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-25638"
    },
    {
      "name": "CVE-2025-49146",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-49146"
    },
    {
      "name": "CVE-2026-34876",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34876"
    },
    {
      "name": "CVE-2025-4432",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-4432"
    },
    {
      "name": "CVE-2023-5590",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-5590"
    },
    {
      "name": "CVE-2025-11468",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-11468"
    },
    {
      "name": "CVE-2020-36181",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-36181"
    },
    {
      "name": "CVE-2020-9548",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-9548"
    },
    {
      "name": "CVE-2020-36182",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-36182"
    },
    {
      "name": "CVE-2025-6069",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-6069"
    },
    {
      "name": "CVE-2020-24616",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-24616"
    },
    {
      "name": "CVE-2025-69419",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-69419"
    },
    {
      "name": "CVE-2025-6075",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-6075"
    },
    {
      "name": "CVE-2026-27456",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27456"
    },
    {
      "name": "CVE-2025-4330",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-4330"
    },
    {
      "name": "CVE-2025-58060",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58060"
    },
    {
      "name": "CVE-2020-36185",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-36185"
    },
    {
      "name": "CVE-2023-50782",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-50782"
    },
    {
      "name": "CVE-2025-4138",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-4138"
    },
    {
      "name": "CVE-2025-61731",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-61731"
    },
    {
      "name": "CVE-2023-0215",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-0215"
    },
    {
      "name": "CVE-2026-1605",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-1605"
    },
    {
      "name": "CVE-2022-25647",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-25647"
    },
    {
      "name": "CVE-2023-0286",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-0286"
    },
    {
      "name": "CVE-2026-27143",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27143"
    },
    {
      "name": "CVE-2024-47561",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47561"
    },
    {
      "name": "CVE-2019-16942",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-16942"
    },
    {
      "name": "CVE-2026-3061",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3061"
    },
    {
      "name": "CVE-2026-27171",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27171"
    },
    {
      "name": "CVE-2020-9547",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-9547"
    },
    {
      "name": "CVE-2026-3731",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3731"
    },
    {
      "name": "CVE-2020-36179",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-36179"
    },
    {
      "name": "CVE-2026-35469",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-35469"
    },
    {
      "name": "CVE-2026-3062",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3062"
    },
    {
      "name": "CVE-2018-14718",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-14718"
    },
    {
      "name": "CVE-2020-10650",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-10650"
    },
    {
      "name": "CVE-2024-24791",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-24791"
    },
    {
      "name": "CVE-2026-1861",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-1861"
    },
    {
      "name": "CVE-2025-66516",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-66516"
    },
    {
      "name": "CVE-2023-4807",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-4807"
    },
    {
      "name": "CVE-2023-2251",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-2251"
    },
    {
      "name": "CVE-2026-25833",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25833"
    },
    {
      "name": "CVE-2024-13176",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-13176"
    },
    {
      "name": "CVE-2025-49844",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-49844"
    },
    {
      "name": "CVE-2020-36186",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-36186"
    },
    {
      "name": "CVE-2025-15467",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-15467"
    },
    {
      "name": "CVE-2020-36189",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-36189"
    },
    {
      "name": "CVE-2024-58251",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-58251"
    },
    {
      "name": "CVE-2019-20444",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-20444"
    },
    {
      "name": "CVE-2025-9820",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-9820"
    },
    {
      "name": "CVE-2020-35490",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-35490"
    },
    {
      "name": "CVE-2026-33870",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33870"
    },
    {
      "name": "CVE-2026-22690",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22690"
    },
    {
      "name": "CVE-2025-55130",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55130"
    },
    {
      "name": "CVE-2023-34454",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-34454"
    },
    {
      "name": "CVE-2022-46337",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-46337"
    },
    {
      "name": "CVE-2021-20190",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-20190"
    },
    {
      "name": "CVE-2021-35516",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-35516"
    },
    {
      "name": "CVE-2026-3544",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3544"
    },
    {
      "name": "CVE-2024-12084",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-12084"
    },
    {
      "name": "CVE-2023-44487",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-44487"
    },
    {
      "name": "CVE-2024-29857",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-29857"
    },
    {
      "name": "CVE-2020-13949",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-13949"
    },
    {
      "name": "CVE-2018-19360",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-19360"
    },
    {
      "name": "CVE-2026-2648",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-2648"
    },
    {
      "name": "CVE-2023-47627",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-47627"
    },
    {
      "name": "CVE-2026-40200",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-40200"
    },
    {
      "name": "CVE-2024-13009",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-13009"
    },
    {
      "name": "CVE-2026-27025",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27025"
    },
    {
      "name": "CVE-2025-55131",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55131"
    },
    {
      "name": "CVE-2026-32778",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-32778"
    },
    {
      "name": "CVE-2026-5121",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5121"
    },
    {
      "name": "CVE-2024-12798",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-12798"
    },
    {
      "name": "CVE-2025-0938",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-0938"
    },
    {
      "name": "CVE-2025-27210",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-27210"
    },
    {
      "name": "CVE-2019-16335",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-16335"
    },
    {
      "name": "CVE-2023-34453",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-34453"
    },
    {
      "name": "CVE-2022-40149",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-40149"
    },
    {
      "name": "CVE-2024-41996",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-41996"
    },
    {
      "name": "CVE-2025-50106",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-50106"
    },
    {
      "name": "CVE-2025-59465",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59465"
    },
    {
      "name": "CVE-2023-3635",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-3635"
    },
    {
      "name": "CVE-2026-21715",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21715"
    },
    {
      "name": "CVE-2020-1971",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971"
    },
    {
      "name": "CVE-2026-34073",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34073"
    },
    {
      "name": "CVE-2026-27144",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27144"
    },
    {
      "name": "CVE-2018-7489",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-7489"
    },
    {
      "name": "CVE-2025-58057",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58057"
    },
    {
      "name": "CVE-2025-8291",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-8291"
    },
    {
      "name": "CVE-2026-22795",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22795"
    },
    {
      "name": "CVE-2026-32283",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-32283"
    },
    {
      "name": "CVE-2019-14893",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-14893"
    },
    {
      "name": "CVE-2019-10202",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-10202"
    },
    {
      "name": "CVE-2026-25834",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25834"
    },
    {
      "name": "CVE-2026-21925",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21925"
    },
    {
      "name": "CVE-2026-3537",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3537"
    },
    {
      "name": "CVE-2024-34158",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-34158"
    },
    {
      "name": "CVE-2025-30754",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-30754"
    },
    {
      "name": "CVE-2025-69225",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-69225"
    },
    {
      "name": "CVE-2025-62718",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-62718"
    },
    {
      "name": "CVE-2026-27024",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27024"
    },
    {
      "name": "CVE-2023-0217",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-0217"
    },
    {
      "name": "CVE-2021-35517",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-35517"
    },
    {
      "name": "CVE-2026-4424",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4424"
    },
    {
      "name": "CVE-2025-67030",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-67030"
    },
    {
      "name": "CVE-2026-34877",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34877"
    },
    {
      "name": "CVE-2026-32281",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
    },
    {
      "name": "CVE-2026-27142",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27142"
    },
    {
      "name": "CVE-2026-28389",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28389"
    },
    {
      "name": "CVE-2021-23358",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-23358"
    },
    {
      "name": "CVE-2025-31133",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31133"
    },
    {
      "name": "CVE-2025-8194",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-8194"
    },
    {
      "name": "CVE-2024-11053",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-11053"
    },
    {
      "name": "CVE-2024-7264",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7264"
    },
    {
      "name": "CVE-2026-34875",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34875"
    },
    {
      "name": "CVE-2026-21717",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21717"
    },
    {
      "name": "CVE-2025-64505",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-64505"
    },
    {
      "name": "CVE-2025-69227",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-69227"
    },
    {
      "name": "CVE-2025-50181",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-50181"
    },
    {
      "name": "CVE-2020-10672",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-10672"
    },
    {
      "name": "CVE-2022-3510",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-3510"
    },
    {
      "name": "CVE-2022-3509",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-3509"
    },
    {
      "name": "CVE-2025-1795",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-1795"
    },
    {
      "name": "CVE-2021-28165",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-28165"
    },
    {
      "name": "CVE-2025-69421",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-69421"
    },
    {
      "name": "CVE-2021-37137",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-37137"
    },
    {
      "name": "CVE-2019-14439",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-14439"
    },
    {
      "name": "CVE-2025-4517",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-4517"
    },
    {
      "name": "CVE-2025-58188",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58188"
    },
    {
      "name": "CVE-2026-34478",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34478"
    },
    {
      "name": "CVE-2026-33055",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33055"
    },
    {
      "name": "CVE-2025-4674",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-4674"
    },
    {
      "name": "CVE-2025-4565",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-4565"
    },
    {
      "name": "CVE-2025-11143",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-11143"
    },
    {
      "name": "CVE-2026-34480",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34480"
    },
    {
      "name": "CVE-2017-7658",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7658"
    },
    {
      "name": "CVE-2026-27699",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27699"
    },
    {
      "name": "CVE-2022-40150",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-40150"
    },
    {
      "name": "CVE-2025-47911",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47911"
    },
    {
      "name": "CVE-2025-28162",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-28162"
    },
    {
      "name": "CVE-2023-22946",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-22946"
    },
    {
      "name": "CVE-2026-33228",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33228"
    },
    {
      "name": "CVE-2020-36187",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-36187"
    },
    {
      "name": "CVE-2026-40175",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-40175"
    },
    {
      "name": "CVE-2025-13151",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-13151"
    },
    {
      "name": "CVE-2025-4435",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-4435"
    },
    {
      "name": "CVE-2024-21634",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21634"
    },
    {
      "name": "CVE-2021-36090",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-36090"
    },
    {
      "name": "CVE-2026-21716",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21716"
    },
    {
      "name": "CVE-2025-64506",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-64506"
    },
    {
      "name": "CVE-2024-53899",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-53899"
    },
    {
      "name": "CVE-2025-68161",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68161"
    },
    {
      "name": "CVE-2026-28351",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28351"
    },
    {
      "name": "CVE-2025-52881",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-52881"
    },
    {
      "name": "CVE-2023-34455",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-34455"
    },
    {
      "name": "CVE-2024-5535",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-5535"
    },
    {
      "name": "CVE-2024-29131",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-29131"
    },
    {
      "name": "CVE-2025-22868",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-22868"
    },
    {
      "name": "CVE-2025-14174",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-14174"
    },
    {
      "name": "CVE-2024-12718",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-12718"
    },
    {
      "name": "CVE-2026-22796",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22796"
    },
    {
      "name": "CVE-2025-64720",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-64720"
    },
    {
      "name": "CVE-2024-30251",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-30251"
    },
    {
      "name": "CVE-2020-11620",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-11620"
    },
    {
      "name": "CVE-2026-2650",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-2650"
    },
    {
      "name": "CVE-2026-3541",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3541"
    },
    {
      "name": "CVE-2024-12801",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-12801"
    },
    {
      "name": "CVE-2021-37136",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-37136"
    },
    {
      "name": "CVE-2018-12022",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12022"
    },
    {
      "name": "CVE-2026-3539",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3539"
    },
    {
      "name": "CVE-2026-34874",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34874"
    },
    {
      "name": "CVE-2026-21712",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21712"
    },
    {
      "name": "CVE-2018-5968",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-5968"
    },
    {
      "name": "CVE-2025-61732",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-61732"
    },
    {
      "name": "CVE-2024-27306",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27306"
    },
    {
      "name": "CVE-2025-61723",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-61723"
    },
    {
      "name": "CVE-2025-9232",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-9232"
    },
    {
      "name": "CVE-2024-8775",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-8775"
    },
    {
      "name": "CVE-2026-3538",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3538"
    },
    {
      "name": "CVE-2025-55159",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55159"
    },
    {
      "name": "CVE-2025-55132",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55132"
    },
    {
      "name": "CVE-2026-22702",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22702"
    },
    {
      "name": "CVE-2025-46394",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-46394"
    },
    {
      "name": "CVE-2025-66471",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-66471"
    },
    {
      "name": "CVE-2020-24750",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-24750"
    },
    {
      "name": "CVE-2026-25679",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
    },
    {
      "name": "CVE-2026-21441",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21441"
    },
    {
      "name": "CVE-2024-45337",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-45337"
    },
    {
      "name": "CVE-2025-13836",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-13836"
    },
    {
      "name": "CVE-2023-39410",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-39410"
    },
    {
      "name": "CVE-2025-68390",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68390"
    },
    {
      "name": "CVE-2024-11079",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-11079"
    },
    {
      "name": "CVE-2026-22732",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22732"
    },
    {
      "name": "CVE-2025-61725",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-61725"
    },
    {
      "name": "CVE-2026-25210",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25210"
    },
    {
      "name": "CVE-2026-28387",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28387"
    },
    {
      "name": "CVE-2025-65018",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-65018"
    },
    {
      "name": "CVE-2026-28388",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28388"
    },
    {
      "name": "CVE-2026-40192",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-40192"
    },
    {
      "name": "CVE-2025-66293",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-66293"
    },
    {
      "name": "CVE-2024-35195",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-35195"
    },
    {
      "name": "CVE-2019-16943",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-16943"
    },
    {
      "name": "CVE-2026-32289",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-32289"
    },
    {
      "name": "CVE-2026-0865",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0865"
    },
    {
      "name": "CVE-2026-21714",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21714"
    },
    {
      "name": "CVE-2024-12087",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-12087"
    },
    {
      "name": "CVE-2017-7525",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7525"
    },
    {
      "name": "CVE-2026-4111",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4111"
    },
    {
      "name": "CVE-2026-24515",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-24515"
    },
    {
      "name": "CVE-2024-26130",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-26130"
    },
    {
      "name": "CVE-2019-20330",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-20330"
    },
    {
      "name": "CVE-2024-41110",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-41110"
    },
    {
      "name": "CVE-2025-50059",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-50059"
    },
    {
      "name": "CVE-2026-2441",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-2441"
    },
    {
      "name": "CVE-2020-14195",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-14195"
    },
    {
      "name": "CVE-2025-69228",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-69228"
    },
    {
      "name": "CVE-2024-34156",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-34156"
    },
    {
      "name": "CVE-2020-35491",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-35491"
    },
    {
      "name": "CVE-2019-17531",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-17531"
    },
    {
      "name": "CVE-2025-1948",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-1948"
    },
    {
      "name": "CVE-2026-32280",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
    },
    {
      "name": "CVE-2025-27553",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-27553"
    },
    {
      "name": "CVE-2025-30761",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-30761"
    },
    {
      "name": "CVE-2022-4450",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-4450"
    },
    {
      "name": "CVE-2026-27888",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27888"
    },
    {
      "name": "CVE-2024-7592",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7592"
    },
    {
      "name": "CVE-2026-33056",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33056"
    },
    {
      "name": "CVE-2026-25835",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25835"
    },
    {
      "name": "CVE-2025-68160",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68160"
    },
    {
      "name": "CVE-2022-3996",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-3996"
    },
    {
      "name": "CVE-2020-14061",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-14061"
    },
    {
      "name": "CVE-2025-52565",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-52565"
    },
    {
      "name": "CVE-2017-7657",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7657"
    },
    {
      "name": "CVE-2025-67735",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-67735"
    },
    {
      "name": "CVE-2025-61728",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-61728"
    },
    {
      "name": "CVE-2026-0965",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0965"
    },
    {
      "name": "CVE-2020-36242",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-36242"
    },
    {
      "name": "CVE-2022-42004",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42004"
    },
    {
      "name": "CVE-2022-40023",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-40023"
    },
    {
      "name": "CVE-2020-11619",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-11619"
    },
    {
      "name": "CVE-2025-9086",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-9086"
    },
    {
      "name": "CVE-2026-34872",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34872"
    },
    {
      "name": "CVE-2025-58187",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58187"
    },
    {
      "name": "CVE-2024-29371",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-29371"
    },
    {
      "name": "CVE-2020-36183",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-36183"
    },
    {
      "name": "CVE-2026-3542",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3542"
    },
    {
      "name": "CVE-2023-49081",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-49081"
    },
    {
      "name": "CVE-2020-8840",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-8840"
    },
    {
      "name": "CVE-2026-34871",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34871"
    },
    {
      "name": "CVE-2025-22871",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-22871"
    },
    {
      "name": "CVE-2025-69226",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-69226"
    },
    {
      "name": "CVE-2026-3536",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3536"
    },
    {
      "name": "CVE-2026-28390",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28390"
    },
    {
      "name": "CVE-2019-0205",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-0205"
    },
    {
      "name": "CVE-2024-32650",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-32650"
    },
    {
      "name": "CVE-2026-34873",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34873"
    },
    {
      "name": "CVE-2026-6042",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6042"
    },
    {
      "name": "CVE-2024-47081",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47081"
    },
    {
      "name": "CVE-2019-10172",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-10172"
    },
    {
      "name": "CVE-2025-47913",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47913"
    },
    {
      "name": "CVE-2024-55549",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-55549"
    },
    {
      "name": "CVE-2024-0397",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-0397"
    },
    {
      "name": "CVE-2020-36184",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-36184"
    },
    {
      "name": "CVE-2026-0967",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0967"
    },
    {
      "name": "CVE-2025-69418",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-69418"
    },
    {
      "name": "CVE-2025-4516",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-4516"
    },
    {
      "name": "CVE-2025-22869",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-22869"
    },
    {
      "name": "CVE-2025-59466",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59466"
    },
    {
      "name": "CVE-2025-15468",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-15468"
    },
    {
      "name": "CVE-2026-25639",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25639"
    },
    {
      "name": "CVE-2026-21713",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21713"
    },
    {
      "name": "CVE-2020-36180",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-36180"
    },
    {
      "name": "CVE-2018-12023",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12023"
    },
    {
      "name": "CVE-2026-0968",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0968"
    },
    {
      "name": "CVE-2026-27140",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27140"
    },
    {
      "name": "CVE-2018-14720",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-14720"
    },
    {
      "name": "CVE-2024-52304",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-52304"
    },
    {
      "name": "CVE-2020-36518",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-36518"
    },
    {
      "name": "CVE-2026-21945",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21945"
    },
    {
      "name": "CVE-2023-5408",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-5408"
    },
    {
      "name": "CVE-2025-69277",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-69277"
    },
    {
      "name": "CVE-2026-25541",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25541"
    },
    {
      "name": "CVE-2026-31789",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-31789"
    },
    {
      "name": "CVE-2026-22735",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22735"
    },
    {
      "name": "CVE-2026-42311",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42311"
    },
    {
      "name": "CVE-2026-20239",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20239"
    },
    {
      "name": "CVE-2025-24855",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-24855"
    },
    {
      "name": "CVE-2026-3063",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3063"
    },
    {
      "name": "CVE-2019-0210",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-0210"
    },
    {
      "name": "CVE-2025-30749",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-30749"
    },
    {
      "name": "CVE-2024-27308",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27308"
    },
    {
      "name": "CVE-2026-42310",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42310"
    },
    {
      "name": "CVE-2026-22695",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22695"
    },
    {
      "name": "CVE-2026-27139",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27139"
    },
    {
      "name": "CVE-2026-20240",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20240"
    },
    {
      "name": "CVE-2023-49083",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-49083"
    },
    {
      "name": "CVE-2017-15095",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-15095"
    },
    {
      "name": "CVE-2019-14540",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-14540"
    },
    {
      "name": "CVE-2024-36114",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-36114"
    },
    {
      "name": "CVE-2019-12086",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-12086"
    },
    {
      "name": "CVE-2018-14721",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-14721"
    },
    {
      "name": "CVE-2025-48924",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48924"
    },
    {
      "name": "CVE-2026-33810",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
    },
    {
      "name": "CVE-2025-66566",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-66566"
    },
    {
      "name": "CVE-2025-11187",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-11187"
    },
    {
      "name": "CVE-2017-7656",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7656"
    },
    {
      "name": "CVE-2026-27026",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27026"
    },
    {
      "name": "CVE-2026-2673",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-2673"
    },
    {
      "name": "CVE-2018-20225",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-20225"
    },
    {
      "name": "CVE-2026-32282",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
    },
    {
      "name": "CVE-2018-11307",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-11307"
    },
    {
      "name": "CVE-2024-3651",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-3651"
    },
    {
      "name": "CVE-2025-68121",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
    },
    {
      "name": "CVE-2024-12088",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-12088"
    },
    {
      "name": "CVE-2025-14819",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-14819"
    },
    {
      "name": "CVE-2022-42003",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42003"
    },
    {
      "name": "CVE-2020-25649",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-25649"
    },
    {
      "name": "CVE-2026-27141",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27141"
    },
    {
      "name": "CVE-2023-2976",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-2976"
    },
    {
      "name": "CVE-2025-61726",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-61726"
    },
    {
      "name": "CVE-2017-17485",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-17485"
    },
    {
      "name": "CVE-2026-1584",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-1584"
    },
    {
      "name": "CVE-2026-20238",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20238"
    },
    {
      "name": "CVE-2024-23829",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-23829"
    },
    {
      "name": "CVE-2025-59464",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59464"
    },
    {
      "name": "CVE-2025-30153",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-30153"
    },
    {
      "name": "CVE-2026-32141",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-32141"
    },
    {
      "name": "CVE-2019-14379",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-14379"
    },
    {
      "name": "CVE-2025-69229",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-69229"
    },
    {
      "name": "CVE-2021-35515",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-35515"
    },
    {
      "name": "CVE-2026-3545",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3545"
    },
    {
      "name": "CVE-2025-30204",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-30204"
    },
    {
      "name": "CVE-2026-28804",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28804"
    },
    {
      "name": "CVE-2026-34477",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34477"
    },
    {
      "name": "CVE-2025-53057",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-53057"
    },
    {
      "name": "CVE-2022-3171",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-3171"
    },
    {
      "name": "CVE-2026-2649",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-2649"
    },
    {
      "name": "CVE-2024-39689",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39689"
    },
    {
      "name": "CVE-2025-37731",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-37731"
    },
    {
      "name": "CVE-2026-24688",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-24688"
    },
    {
      "name": "CVE-2026-32776",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-32776"
    },
    {
      "name": "CVE-2025-12183",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-12183"
    },
    {
      "name": "CVE-2019-16869",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-16869"
    },
    {
      "name": "CVE-2025-68119",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68119"
    },
    {
      "name": "CVE-2025-7338",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-7338"
    },
    {
      "name": "CVE-2022-23491",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-23491"
    },
    {
      "name": "CVE-2025-53066",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-53066"
    },
    {
      "name": "CVE-2026-22691",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22691"
    },
    {
      "name": "CVE-2026-27628",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27628"
    },
    {
      "name": "CVE-2025-69420",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-69420"
    },
    {
      "name": "CVE-2025-47273",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47273"
    },
    {
      "name": "CVE-2026-1225",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-1225"
    },
    {
      "name": "CVE-2020-14060",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-14060"
    },
    {
      "name": "CVE-2026-31790",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-31790"
    },
    {
      "name": "CVE-2020-36188",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-36188"
    },
    {
      "name": "CVE-2025-61729",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
    },
    {
      "name": "CVE-2024-6345",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6345"
    },
    {
      "name": "CVE-2025-14831",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-14831"
    },
    {
      "name": "CVE-2024-23334",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-23334"
    },
    {
      "name": "CVE-2019-14892",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-14892"
    },
    {
      "name": "CVE-2026-21710",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21710"
    },
    {
      "name": "CVE-2025-66418",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-66418"
    },
    {
      "name": "CVE-2019-20445",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-20445"
    },
    {
      "name": "CVE-2025-11226",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-11226"
    },
    {
      "name": "CVE-2020-14062",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-14062"
    }
  ],
  "initial_release_date": "2026-05-21T00:00:00",
  "last_revision_date": "2026-05-21T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0627",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-05-21T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Splunk. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Splunk",
  "vendor_advisories": [
    {
      "published_at": "2026-05-20",
      "title": "Bulletin de s\u00e9curit\u00e9 Splunk SVD-2026-0512",
      "url": "https://advisory.splunk.com/advisories/SVD-2026-0512"
    },
    {
      "published_at": "2026-05-20",
      "title": "Bulletin de s\u00e9curit\u00e9 Splunk SVD-2026-0513",
      "url": "https://advisory.splunk.com/advisories/SVD-2026-0513"
    },
    {
      "published_at": "2026-05-20",
      "title": "Bulletin de s\u00e9curit\u00e9 Splunk SVD-2026-0509",
      "url": "https://advisory.splunk.com/advisories/SVD-2026-0509"
    },
    {
      "published_at": "2026-05-20",
      "title": "Bulletin de s\u00e9curit\u00e9 Splunk SVD-2026-0510",
      "url": "https://advisory.splunk.com/advisories/SVD-2026-0510"
    },
    {
      "published_at": "2026-05-20",
      "title": "Bulletin de s\u00e9curit\u00e9 Splunk SVD-2026-0505",
      "url": "https://advisory.splunk.com/advisories/SVD-2026-0505"
    },
    {
      "published_at": "2026-05-20",
      "title": "Bulletin de s\u00e9curit\u00e9 Splunk SVD-2026-0515",
      "url": "https://advisory.splunk.com/advisories/SVD-2026-0515"
    },
    {
      "published_at": "2026-05-20",
      "title": "Bulletin de s\u00e9curit\u00e9 Splunk SVD-2026-0507",
      "url": "https://advisory.splunk.com/advisories/SVD-2026-0507"
    },
    {
      "published_at": "2026-05-20",
      "title": "Bulletin de s\u00e9curit\u00e9 Splunk SVD-2026-0506",
      "url": "https://advisory.splunk.com/advisories/SVD-2026-0506"
    },
    {
      "published_at": "2026-05-20",
      "title": "Bulletin de s\u00e9curit\u00e9 Splunk SVD-2026-0508",
      "url": "https://advisory.splunk.com/advisories/SVD-2026-0508"
    },
    {
      "published_at": "2026-05-20",
      "title": "Bulletin de s\u00e9curit\u00e9 Splunk SVD-2026-0504",
      "url": "https://advisory.splunk.com/advisories/SVD-2026-0504"
    },
    {
      "published_at": "2026-05-20",
      "title": "Bulletin de s\u00e9curit\u00e9 Splunk SVD-2026-0514",
      "url": "https://advisory.splunk.com/advisories/SVD-2026-0514"
    },
    {
      "published_at": "2026-05-20",
      "title": "Bulletin de s\u00e9curit\u00e9 Splunk SVD-2026-0516",
      "url": "https://advisory.splunk.com/advisories/SVD-2026-0516"
    },
    {
      "published_at": "2026-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Splunk SVD-2026-0501",
      "url": "https://advisory.splunk.com/advisories/SVD-2026-0501"
    },
    {
      "published_at": "2026-05-20",
      "title": "Bulletin de s\u00e9curit\u00e9 Splunk SVD-2026-0503",
      "url": "https://advisory.splunk.com/advisories/SVD-2026-0503"
    },
    {
      "published_at": "2026-05-20",
      "title": "Bulletin de s\u00e9curit\u00e9 Splunk SVD-2026-0511",
      "url": "https://advisory.splunk.com/advisories/SVD-2026-0511"
    },
    {
      "published_at": "2026-05-20",
      "title": "Bulletin de s\u00e9curit\u00e9 Splunk SVD-2026-0502",
      "url": "https://advisory.splunk.com/advisories/SVD-2026-0502"
    }
  ]
}

{
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A flaw in Node.js URL processing causes an assertion failure in native code when `url.format()` is called with a malformed internationalized domain name (IDN) containing invalid characters, crashing the Node.js process."
    },
    {
      "lang": "es",
      "value": "Una falla en el procesamiento de URL de Node.js causa una falla de aserci\u00f3n en c\u00f3digo nativo cuando se llama a \u0027url.format()\u0027 con un nombre de dominio internacionalizado (IDN) malformado que contiene caracteres no v\u00e1lidos, colapsando el proceso de Node.js."
    }
  ],
  "id": "CVE-2026-21712",
  "lastModified": "2026-05-10T14:16:47.377",
  "metrics": {
    "cvssMetricV30": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 5.7,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
          "version": "3.0"
        },
        "exploitabilityScore": 2.1,
        "impactScore": 3.6,
        "source": "support@hackerone.com",
        "type": "Secondary"
      }
    ]
  },
  "published": "2026-03-30T16:16:03.510",
  "references": [
    {
      "source": "support@hackerone.com",
      "url": "https://hackerone.com/reports/3546390"
    },
    {
      "source": "support@hackerone.com",
      "url": "https://nodejs.org/en/blog/vulnerability/march-2026-security-releases"
    }
  ],
  "sourceIdentifier": "support@hackerone.com",
  "vulnStatus": "Awaiting Analysis",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary"
    }
  ]
}

{
  "affected": [],
  "aliases": [
    "CVE-2026-21712"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-20"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-03-30T16:16:03Z",
    "severity": "MODERATE"
  },
  "details": "A flaw in Node.js URL processing causes an assertion failure in native code when `url.format()` is called with a malformed internationalized domain name (IDN) containing invalid characters, crashing the Node.js process.",
  "id": "GHSA-h8r7-m85c-mjhv",
  "modified": "2026-03-30T18:31:17Z",
  "published": "2026-03-30T18:31:17Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21712"
    },
    {
      "type": "WEB",
      "url": "https://hackerone.com/reports/3546390"
    },
    {
      "type": "WEB",
      "url": "https://nodejs.org/en/blog/vulnerability/march-2026-security-releases"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    }
  ]
}

{
  "document": {
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Public",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
        "title": "Disclaimer"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "secure@microsoft.com",
      "name": "Microsoft Security Response Center",
      "namespace": "https://msrc.microsoft.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "CVE-2026-21712 - VEX",
        "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-21712.json"
      },
      {
        "category": "external",
        "summary": "Microsoft Support Lifecycle",
        "url": "https://support.microsoft.com/lifecycle"
      },
      {
        "category": "external",
        "summary": "Common Vulnerability Scoring System",
        "url": "https://www.first.org/cvss"
      }
    ],
    "title": "CVE-2026-21712",
    "tracking": {
      "current_release_date": "2026-04-09T01:39:07.000Z",
      "generator": {
        "date": "2026-04-09T07:12:52.653Z",
        "engine": {
          "name": "MSRC Generator",
          "version": "1.0"
        }
      },
      "id": "msrc_CVE-2026-21712",
      "initial_release_date": "2026-03-02T00:00:00.000Z",
      "revision_history": [
        {
          "date": "2026-03-31T01:01:57.000Z",
          "legacy_version": "1",
          "number": "1",
          "summary": "Information published."
        },
        {
          "date": "2026-04-01T01:57:37.000Z",
          "legacy_version": "2",
          "number": "2",
          "summary": "Information published."
        },
        {
          "date": "2026-04-09T01:39:07.000Z",
          "legacy_version": "3",
          "number": "3",
          "summary": "Information published."
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "3.0",
                "product": {
                  "name": "Azure Linux 3.0",
                  "product_id": "17084"
                }
              }
            ],
            "category": "product_name",
            "name": "Azure Linux"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cazl3 nodejs24 24.13.0-3",
                "product": {
                  "name": "\u003cazl3 nodejs24 24.13.0-3",
                  "product_id": "1"
                }
              },
              {
                "category": "product_version",
                "name": "azl3 nodejs24 24.13.0-3",
                "product": {
                  "name": "azl3 nodejs24 24.13.0-3",
                  "product_id": "21059"
                }
              }
            ],
            "category": "product_name",
            "name": "nodejs24"
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003cazl3 nodejs24 24.13.0-3 as a component of Azure Linux 3.0",
          "product_id": "17084-1"
        },
        "product_reference": "1",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 nodejs24 24.13.0-3 as a component of Azure Linux 3.0",
          "product_id": "21059-17084"
        },
        "product_reference": "21059",
        "relates_to_product_reference": "17084"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-21712",
      "notes": [
        {
          "category": "general",
          "text": "hackerone",
          "title": "Assigning CNA"
        }
      ],
      "product_status": {
        "fixed": [
          "21059-17084"
        ],
        "known_affected": [
          "17084-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-21712 - VEX",
          "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-21712.json"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-03-31T01:01:57.000Z",
          "details": "24.14.1-1:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
          "product_ids": [
            "17084-1"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "environmentalsScore": 0.0,
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "temporalScore": 5.7,
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "17084-1"
          ]
        }
      ],
      "title": "CVE-2026-21712"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "corepack24-24.14.1-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the corepack24-24.14.1-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2026-10504",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_10504-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-21710 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-21710/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-21712 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-21712/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-21713 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-21713/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-21714 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-21714/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-21715 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-21715/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-21716 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-21716/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-21717 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-21717/"
      }
    ],
    "title": "corepack24-24.14.1-1.1 on GA media",
    "tracking": {
      "current_release_date": "2026-04-08T00:00:00Z",
      "generator": {
        "date": "2026-04-08T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2026:10504-1",
      "initial_release_date": "2026-04-08T00:00:00Z",
      "revision_history": [
        {
          "date": "2026-04-08T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "corepack24-24.14.1-1.1.aarch64",
                "product": {
                  "name": "corepack24-24.14.1-1.1.aarch64",
                  "product_id": "corepack24-24.14.1-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs24-24.14.1-1.1.aarch64",
                "product": {
                  "name": "nodejs24-24.14.1-1.1.aarch64",
                  "product_id": "nodejs24-24.14.1-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs24-devel-24.14.1-1.1.aarch64",
                "product": {
                  "name": "nodejs24-devel-24.14.1-1.1.aarch64",
                  "product_id": "nodejs24-devel-24.14.1-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs24-docs-24.14.1-1.1.aarch64",
                "product": {
                  "name": "nodejs24-docs-24.14.1-1.1.aarch64",
                  "product_id": "nodejs24-docs-24.14.1-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "npm24-24.14.1-1.1.aarch64",
                "product": {
                  "name": "npm24-24.14.1-1.1.aarch64",
                  "product_id": "npm24-24.14.1-1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "corepack24-24.14.1-1.1.ppc64le",
                "product": {
                  "name": "corepack24-24.14.1-1.1.ppc64le",
                  "product_id": "corepack24-24.14.1-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs24-24.14.1-1.1.ppc64le",
                "product": {
                  "name": "nodejs24-24.14.1-1.1.ppc64le",
                  "product_id": "nodejs24-24.14.1-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs24-devel-24.14.1-1.1.ppc64le",
                "product": {
                  "name": "nodejs24-devel-24.14.1-1.1.ppc64le",
                  "product_id": "nodejs24-devel-24.14.1-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs24-docs-24.14.1-1.1.ppc64le",
                "product": {
                  "name": "nodejs24-docs-24.14.1-1.1.ppc64le",
                  "product_id": "nodejs24-docs-24.14.1-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "npm24-24.14.1-1.1.ppc64le",
                "product": {
                  "name": "npm24-24.14.1-1.1.ppc64le",
                  "product_id": "npm24-24.14.1-1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "corepack24-24.14.1-1.1.s390x",
                "product": {
                  "name": "corepack24-24.14.1-1.1.s390x",
                  "product_id": "corepack24-24.14.1-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs24-24.14.1-1.1.s390x",
                "product": {
                  "name": "nodejs24-24.14.1-1.1.s390x",
                  "product_id": "nodejs24-24.14.1-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs24-devel-24.14.1-1.1.s390x",
                "product": {
                  "name": "nodejs24-devel-24.14.1-1.1.s390x",
                  "product_id": "nodejs24-devel-24.14.1-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs24-docs-24.14.1-1.1.s390x",
                "product": {
                  "name": "nodejs24-docs-24.14.1-1.1.s390x",
                  "product_id": "nodejs24-docs-24.14.1-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "npm24-24.14.1-1.1.s390x",
                "product": {
                  "name": "npm24-24.14.1-1.1.s390x",
                  "product_id": "npm24-24.14.1-1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "corepack24-24.14.1-1.1.x86_64",
                "product": {
                  "name": "corepack24-24.14.1-1.1.x86_64",
                  "product_id": "corepack24-24.14.1-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs24-24.14.1-1.1.x86_64",
                "product": {
                  "name": "nodejs24-24.14.1-1.1.x86_64",
                  "product_id": "nodejs24-24.14.1-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs24-devel-24.14.1-1.1.x86_64",
                "product": {
                  "name": "nodejs24-devel-24.14.1-1.1.x86_64",
                  "product_id": "nodejs24-devel-24.14.1-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs24-docs-24.14.1-1.1.x86_64",
                "product": {
                  "name": "nodejs24-docs-24.14.1-1.1.x86_64",
                  "product_id": "nodejs24-docs-24.14.1-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "npm24-24.14.1-1.1.x86_64",
                "product": {
                  "name": "npm24-24.14.1-1.1.x86_64",
                  "product_id": "npm24-24.14.1-1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "corepack24-24.14.1-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:corepack24-24.14.1-1.1.aarch64"
        },
        "product_reference": "corepack24-24.14.1-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "corepack24-24.14.1-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:corepack24-24.14.1-1.1.ppc64le"
        },
        "product_reference": "corepack24-24.14.1-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "corepack24-24.14.1-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:corepack24-24.14.1-1.1.s390x"
        },
        "product_reference": "corepack24-24.14.1-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "corepack24-24.14.1-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:corepack24-24.14.1-1.1.x86_64"
        },
        "product_reference": "corepack24-24.14.1-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs24-24.14.1-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.aarch64"
        },
        "product_reference": "nodejs24-24.14.1-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs24-24.14.1-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.ppc64le"
        },
        "product_reference": "nodejs24-24.14.1-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs24-24.14.1-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.s390x"
        },
        "product_reference": "nodejs24-24.14.1-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs24-24.14.1-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.x86_64"
        },
        "product_reference": "nodejs24-24.14.1-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs24-devel-24.14.1-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.aarch64"
        },
        "product_reference": "nodejs24-devel-24.14.1-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs24-devel-24.14.1-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.ppc64le"
        },
        "product_reference": "nodejs24-devel-24.14.1-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs24-devel-24.14.1-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.s390x"
        },
        "product_reference": "nodejs24-devel-24.14.1-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs24-devel-24.14.1-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.x86_64"
        },
        "product_reference": "nodejs24-devel-24.14.1-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs24-docs-24.14.1-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.aarch64"
        },
        "product_reference": "nodejs24-docs-24.14.1-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs24-docs-24.14.1-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.ppc64le"
        },
        "product_reference": "nodejs24-docs-24.14.1-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs24-docs-24.14.1-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.s390x"
        },
        "product_reference": "nodejs24-docs-24.14.1-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs24-docs-24.14.1-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.x86_64"
        },
        "product_reference": "nodejs24-docs-24.14.1-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm24-24.14.1-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:npm24-24.14.1-1.1.aarch64"
        },
        "product_reference": "npm24-24.14.1-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm24-24.14.1-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:npm24-24.14.1-1.1.ppc64le"
        },
        "product_reference": "npm24-24.14.1-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm24-24.14.1-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:npm24-24.14.1-1.1.s390x"
        },
        "product_reference": "npm24-24.14.1-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm24-24.14.1-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:npm24-24.14.1-1.1.x86_64"
        },
        "product_reference": "npm24-24.14.1-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-21710",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-21710"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw in Node.js HTTP request handling causes an uncaught `TypeError` when a request is received with a header named `__proto__` and the application accesses `req.headersDistinct`.\r\n\r\nWhen this occurs, `dest[\"__proto__\"]` resolves to `Object.prototype` rather than `undefined`, causing `.push()` to be called on a non-array. This exception is thrown synchronously inside a property getter and cannot be intercepted by `error` event listeners, meaning it cannot be handled without wrapping every `req.headersDistinct` access in a `try/catch`.\r\n\r\n* This vulnerability affects all Node.js HTTP servers on **20.x, 22.x, 24.x, and v25.x**",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:corepack24-24.14.1-1.1.aarch64",
          "openSUSE Tumbleweed:corepack24-24.14.1-1.1.ppc64le",
          "openSUSE Tumbleweed:corepack24-24.14.1-1.1.s390x",
          "openSUSE Tumbleweed:corepack24-24.14.1-1.1.x86_64",
          "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.aarch64",
          "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.ppc64le",
          "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.s390x",
          "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.x86_64",
          "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.aarch64",
          "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.ppc64le",
          "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.s390x",
          "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.x86_64",
          "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.aarch64",
          "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.ppc64le",
          "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.s390x",
          "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.x86_64",
          "openSUSE Tumbleweed:npm24-24.14.1-1.1.aarch64",
          "openSUSE Tumbleweed:npm24-24.14.1-1.1.ppc64le",
          "openSUSE Tumbleweed:npm24-24.14.1-1.1.s390x",
          "openSUSE Tumbleweed:npm24-24.14.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-21710",
          "url": "https://www.suse.com/security/cve/CVE-2026-21710"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260455 for CVE-2026-21710",
          "url": "https://bugzilla.suse.com/1260455"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-08T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-21710"
    },
    {
      "cve": "CVE-2026-21712",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-21712"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw in Node.js URL processing causes an assertion failure in native code when `url.format()` is called with a malformed internationalized domain name (IDN) containing invalid characters, crashing the Node.js process.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:corepack24-24.14.1-1.1.aarch64",
          "openSUSE Tumbleweed:corepack24-24.14.1-1.1.ppc64le",
          "openSUSE Tumbleweed:corepack24-24.14.1-1.1.s390x",
          "openSUSE Tumbleweed:corepack24-24.14.1-1.1.x86_64",
          "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.aarch64",
          "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.ppc64le",
          "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.s390x",
          "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.x86_64",
          "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.aarch64",
          "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.ppc64le",
          "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.s390x",
          "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.x86_64",
          "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.aarch64",
          "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.ppc64le",
          "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.s390x",
          "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.x86_64",
          "openSUSE Tumbleweed:npm24-24.14.1-1.1.aarch64",
          "openSUSE Tumbleweed:npm24-24.14.1-1.1.ppc64le",
          "openSUSE Tumbleweed:npm24-24.14.1-1.1.s390x",
          "openSUSE Tumbleweed:npm24-24.14.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-21712",
          "url": "https://www.suse.com/security/cve/CVE-2026-21712"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260460 for CVE-2026-21712",
          "url": "https://bugzilla.suse.com/1260460"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-08T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-21712"
    },
    {
      "cve": "CVE-2026-21713",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-21713"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw in Node.js HMAC verification uses a non-constant-time comparison when validating user-provided signatures, potentially leaking timing information proportional to the number of matching bytes. Under certain threat models where high-resolution timing measurements are possible, this behavior could be exploited as a timing oracle to infer HMAC values.\r\n\r\nNode.js already provides timing-safe comparison primitives used elsewhere in the codebase, indicating this is an oversight rather than an intentional design decision.\r\n\r\nThis vulnerability affects **20.x, 22.x, 24.x, and 25.x**.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:corepack24-24.14.1-1.1.aarch64",
          "openSUSE Tumbleweed:corepack24-24.14.1-1.1.ppc64le",
          "openSUSE Tumbleweed:corepack24-24.14.1-1.1.s390x",
          "openSUSE Tumbleweed:corepack24-24.14.1-1.1.x86_64",
          "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.aarch64",
          "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.ppc64le",
          "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.s390x",
          "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.x86_64",
          "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.aarch64",
          "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.ppc64le",
          "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.s390x",
          "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.x86_64",
          "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.aarch64",
          "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.ppc64le",
          "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.s390x",
          "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.x86_64",
          "openSUSE Tumbleweed:npm24-24.14.1-1.1.aarch64",
          "openSUSE Tumbleweed:npm24-24.14.1-1.1.ppc64le",
          "openSUSE Tumbleweed:npm24-24.14.1-1.1.s390x",
          "openSUSE Tumbleweed:npm24-24.14.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-21713",
          "url": "https://www.suse.com/security/cve/CVE-2026-21713"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260463 for CVE-2026-21713",
          "url": "https://bugzilla.suse.com/1260463"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-08T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-21713"
    },
    {
      "cve": "CVE-2026-21714",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-21714"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A memory leak occurs in Node.js HTTP/2 servers when a client sends WINDOW_UPDATE frames on stream 0 (connection-level) that cause the flow control window to exceed the maximum value of 2-1. The server correctly sends a GOAWAY frame, but the Http2Session object is never cleaned up.\r\n\r\nThis vulnerability affects HTTP2 users on Node.js 20, 22, 24 and 25.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:corepack24-24.14.1-1.1.aarch64",
          "openSUSE Tumbleweed:corepack24-24.14.1-1.1.ppc64le",
          "openSUSE Tumbleweed:corepack24-24.14.1-1.1.s390x",
          "openSUSE Tumbleweed:corepack24-24.14.1-1.1.x86_64",
          "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.aarch64",
          "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.ppc64le",
          "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.s390x",
          "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.x86_64",
          "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.aarch64",
          "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.ppc64le",
          "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.s390x",
          "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.x86_64",
          "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.aarch64",
          "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.ppc64le",
          "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.s390x",
          "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.x86_64",
          "openSUSE Tumbleweed:npm24-24.14.1-1.1.aarch64",
          "openSUSE Tumbleweed:npm24-24.14.1-1.1.ppc64le",
          "openSUSE Tumbleweed:npm24-24.14.1-1.1.s390x",
          "openSUSE Tumbleweed:npm24-24.14.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-21714",
          "url": "https://www.suse.com/security/cve/CVE-2026-21714"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260480 for CVE-2026-21714",
          "url": "https://bugzilla.suse.com/1260480"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-08T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-21714"
    },
    {
      "cve": "CVE-2026-21715",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-21715"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw in Node.js Permission Model filesystem enforcement leaves `fs.realpathSync.native()` without the required read permission checks, while all comparable filesystem functions correctly enforce them.\r\n\r\nAs a result, code running under `--permission` with restricted `--allow-fs-read` can still use `fs.realpathSync.native()` to check file existence, resolve symlink targets, and enumerate filesystem paths outside of permitted directories.\r\n\r\nThis vulnerability affects **20.x, 22.x, 24.x, and 25.x** processes using the Permission Model where `--allow-fs-read` is intentionally restricted.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:corepack24-24.14.1-1.1.aarch64",
          "openSUSE Tumbleweed:corepack24-24.14.1-1.1.ppc64le",
          "openSUSE Tumbleweed:corepack24-24.14.1-1.1.s390x",
          "openSUSE Tumbleweed:corepack24-24.14.1-1.1.x86_64",
          "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.aarch64",
          "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.ppc64le",
          "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.s390x",
          "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.x86_64",
          "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.aarch64",
          "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.ppc64le",
          "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.s390x",
          "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.x86_64",
          "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.aarch64",
          "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.ppc64le",
          "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.s390x",
          "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.x86_64",
          "openSUSE Tumbleweed:npm24-24.14.1-1.1.aarch64",
          "openSUSE Tumbleweed:npm24-24.14.1-1.1.ppc64le",
          "openSUSE Tumbleweed:npm24-24.14.1-1.1.s390x",
          "openSUSE Tumbleweed:npm24-24.14.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-21715",
          "url": "https://www.suse.com/security/cve/CVE-2026-21715"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260482 for CVE-2026-21715",
          "url": "https://bugzilla.suse.com/1260482"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-08T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2026-21715"
    },
    {
      "cve": "CVE-2026-21716",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-21716"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An incomplete fix for CVE-2024-36137 leaves `FileHandle.chmod()` and `FileHandle.chown()` in the promises API without the required permission checks, while their callback-based equivalents (`fs.fchmod()`, `fs.fchown()`) were correctly patched.\r\n\r\nAs a result, code running under `--permission` with restricted `--allow-fs-write` can still use promise-based `FileHandle` methods to modify file permissions and ownership on already-open file descriptors, bypassing the intended write restrictions.\r\n\r\nThis vulnerability affects **20.x, 22.x, 24.x, and 25.x** processes using the Permission Model where `--allow-fs-write` is intentionally restricted.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:corepack24-24.14.1-1.1.aarch64",
          "openSUSE Tumbleweed:corepack24-24.14.1-1.1.ppc64le",
          "openSUSE Tumbleweed:corepack24-24.14.1-1.1.s390x",
          "openSUSE Tumbleweed:corepack24-24.14.1-1.1.x86_64",
          "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.aarch64",
          "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.ppc64le",
          "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.s390x",
          "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.x86_64",
          "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.aarch64",
          "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.ppc64le",
          "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.s390x",
          "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.x86_64",
          "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.aarch64",
          "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.ppc64le",
          "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.s390x",
          "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.x86_64",
          "openSUSE Tumbleweed:npm24-24.14.1-1.1.aarch64",
          "openSUSE Tumbleweed:npm24-24.14.1-1.1.ppc64le",
          "openSUSE Tumbleweed:npm24-24.14.1-1.1.s390x",
          "openSUSE Tumbleweed:npm24-24.14.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-21716",
          "url": "https://www.suse.com/security/cve/CVE-2026-21716"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260462 for CVE-2026-21716",
          "url": "https://bugzilla.suse.com/1260462"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-08T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-21716"
    },
    {
      "cve": "CVE-2026-21717",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-21717"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw in V8\u0027s string hashing mechanism causes integer-like strings to be hashed to their numeric value, making hash collisions trivially predictable. By crafting a request that causes many such collisions in V8\u0027s internal string table, an attacker can significantly degrade performance of the Node.js process.\r\n\r\nThe most common trigger is any endpoint that calls `JSON.parse()` on attacker-controlled input, as JSON parsing automatically internalizes short strings into the affected hash table.\r\n\r\nThis vulnerability affects **20.x, 22.x, 24.x, and 25.x**.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:corepack24-24.14.1-1.1.aarch64",
          "openSUSE Tumbleweed:corepack24-24.14.1-1.1.ppc64le",
          "openSUSE Tumbleweed:corepack24-24.14.1-1.1.s390x",
          "openSUSE Tumbleweed:corepack24-24.14.1-1.1.x86_64",
          "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.aarch64",
          "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.ppc64le",
          "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.s390x",
          "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.x86_64",
          "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.aarch64",
          "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.ppc64le",
          "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.s390x",
          "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.x86_64",
          "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.aarch64",
          "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.ppc64le",
          "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.s390x",
          "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.x86_64",
          "openSUSE Tumbleweed:npm24-24.14.1-1.1.aarch64",
          "openSUSE Tumbleweed:npm24-24.14.1-1.1.ppc64le",
          "openSUSE Tumbleweed:npm24-24.14.1-1.1.s390x",
          "openSUSE Tumbleweed:npm24-24.14.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-21717",
          "url": "https://www.suse.com/security/cve/CVE-2026-21717"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260494 for CVE-2026-21717",
          "url": "https://bugzilla.suse.com/1260494"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:corepack24-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:nodejs24-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:nodejs24-devel-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:nodejs24-docs-24.14.1-1.1.x86_64",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.aarch64",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.ppc64le",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.s390x",
            "openSUSE Tumbleweed:npm24-24.14.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-08T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-21717"
    }
  ]
}